@serfab/cadre-core 0.7.1 → 0.8.1

package/dist/strand-addr-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strand-addr-protocol.js","sourceRoot":"","sources":["../src/strand-addr-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAsB,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEnG,MAAM,GAAG,GAAG,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAE9C,wGAAwG;AACxG,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEhE;;;;GAIG;AACH,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhC,uFAAuF;AACvF,MAAM,uBAAuB,GAAG,KAAM,CAAC;AAEvC,yFAAyF;AACzF,MAAM,4BAA4B,GAAG,KAAM,CAAC;AAE5C,wFAAwF;AACxF,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEzC;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAI,MAAqB,EAAE,SAAiB;IAClE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAM,CAAC;AACzD,CAAC;AAED,yFAAyF;AACzF,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACtC,CAAC;AA8BD;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IAQ5B,YAAY,OAAiC;QAJrC,SAAI,GAAkB,IAAI,CAAC;QACnC,oFAAoF;QAC5E,kBAAa,GAAG,CAAC,CAAC;QAGxB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,4BAA4B,CAAC;QAC3E,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,4BAA4B,CAAC;IAC7E,CAAC;IAED,uDAAuD;IACvD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,qEAAqE;IACrE,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,4EAA4E;QAC5E,iEAAiE;QACjE,yBAAyB;QACzB,KAAK,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,SAAkB,EAAE,aAAsB,EAAE,EAAE;YAC1F,MAAM,YAAY,GAAI,aAA4B,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACzE,MAAM,IAAI,CAAC,YAAY,CAAC,SAA0B,EAAE,YAAY,CAAC,CAAC;QACpE,CAAC,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,GAAG,CAAC,0CAA0C,EAAE,oBAAoB,CAAC,CAAC;IACxE,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,YAAY,CAAC,MAAqB,EAAE,YAAoB;QACpE,GAAG,CAAC,uCAAuC,EAAE,YAAY,CAAC,CAAC;QAE3D,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7C,GAAG,CAAC,gEAAgE,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC5H,wEAAwE;YACxE,2EAA2E;YAC3E,iDAAiD;YACjD,IAAI,CAAC;gBACH,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAoB,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACtE,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,gDAAgD,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;YACzE,wEAAwE;YACxE,mEAAmE;YACnE,IAAI,CAAC;gBACH,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAA0B,EAAE,YAAoB;QACvE,wEAAwE;QACxE,+CAA+C;QAC/C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,yCAAyC,EAAE,YAAY,CAAC,CAAC;YAC7D,OAAO,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtE,GAAG,CAAC,iCAAiC,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5E,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;IACpD,CAAC;CACF;AAsBD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,KAAuB,EACvB,QAAgB,EAChB,UAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IACtC,MAAM,OAAO,GAAsB,EAAE,QAAQ,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAE1D,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CACrE,CAAC;IAEF,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAY,EACZ,IAAoB,EACpB,OAA0B,EAC1B,OAAkC;IAElC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC/D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAElC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,+BAA+B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,SAAS,EACT,oBAAoB,IAAI,CAAC,MAAM,EAAE,EACjC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,EACrF,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CACzB,CAAC;YACF,OAAO,QAAQ,CAAC,UAAU,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,0CAA0C,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,IAAoB;IACvC,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,kDAAkD,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,uEAAuE;AACvE,SAAS,cAAc,CAAC,MAA0B;IAChD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAY,EACZ,MAA0B,EAC1B,UAAkB,EAClB,OAA0B,EAC1B,SAAiB,EACjB,MAAmB;IAEnB,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,oDAAoD;IACpD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG,SAAqC,CAAC;IAErD,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,sFAAsF;IACtF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;QACV,MAAM,QAAQ,CAAC;IACjB,CAAC;IACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5B,4EAA4E;QAC5E,oEAAoE;QACpE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAqB,MAAM,EAAE,SAAS,CAAC,CAAC;QACxE,GAAG,CAAC,yCAAyC,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9F,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/strand-cohort.d.ts

@@ -0,0 +1,54 @@
+import type { StrandMode } from './types.js';
+/**
+ * A single CadrePeer membership row, as returned by
+ * `ControlDatabase.queryCadrePeers()`.
+ */
+export interface CohortPeerRow {
+    peerId: string;
+    /** Comma-joined list of multiaddr strings; `''` when no addrs were recorded. */
+    multiaddr: string | null;
+}
+/**
+ * Cohort-derived discovery seed for a strand's libp2p node. `bootstrapNodes`
+ * here are **strand-network** addresses resolved on demand from co-cadre
+ * siblings (see `collectStrandAddrs` / `STRAND_ADDR_PROTOCOL`), NOT the control
+ * addresses stored in `CadrePeer.Multiaddr`.
+ */
+export interface CohortSeed {
+    /** Dialable strand-network multiaddr strings for cohort peers other than self (deduplicated). */
+    bootstrapNodes: string[];
+    /** True when at least one CadrePeer row other than self exists (even if it has no resolvable strand addr). */
+    hasOtherPeers: boolean;
+}
+/**
+ * Membership-only view of a strand's cohort, derived from the control network's
+ * CadrePeer rows. The bootstrap addresses themselves are resolved separately
+ * (over the strand-addr RPC) from these peerIds, never from the rows' addr field.
+ */
+export interface CohortMembers {
+    /** PeerIds of cohort members other than self — the strand-addr RPC fan-out targets (deduplicated, in row order). */
+    otherPeerIds: string[];
+    /** True when at least one CadrePeer row other than self exists (even if it has no resolvable strand addr). */
+    hasOtherPeers: boolean;
+}
+/**
+ * Derive the membership view of a strand's cohort from the control network's
+ * CadrePeer rows: the peerIds of members other than `selfPeerId` (the strand-addr
+ * RPC fan-out targets) and whether any other member exists at all.
+ *
+ * Deliberately does NOT read `CadrePeer.Multiaddr` — that field carries each
+ * node's *control*-network address, which must not seed the *strand* mesh
+ * (dialing it reaches the remote's control instance, not its strand instance).
+ * The strand-network bootstrap addresses are resolved on demand over the control
+ * mesh from these peerIds. `hasOtherPeers` reflects membership presence, NOT
+ * dialability, so a cohort whose strand addrs are not yet resolvable still
+ * selects `networked` mode.
+ */
+export declare function deriveCohortMembers(peers: CohortPeerRow[], selfPeerId?: string): CohortMembers;
+/**
+ * Choose the strand mode. An explicit mode (from `addStrand`) always wins. When
+ * omitted (the `handleStrandAdded` discovery path, or an `addStrand` caller that
+ * leaves it unset), infer: `bootstrap` for a solo/first node (no other peers),
+ * `networked` once the cohort has other members.
+ */
+export declare function selectStrandMode(explicitMode: StrandMode | undefined, hasOtherPeers: boolean): StrandMode;

package/dist/strand-cohort.js

@@ -0,0 +1,38 @@
+/**
+ * Derive the membership view of a strand's cohort from the control network's
+ * CadrePeer rows: the peerIds of members other than `selfPeerId` (the strand-addr
+ * RPC fan-out targets) and whether any other member exists at all.
+ *
+ * Deliberately does NOT read `CadrePeer.Multiaddr` — that field carries each
+ * node's *control*-network address, which must not seed the *strand* mesh
+ * (dialing it reaches the remote's control instance, not its strand instance).
+ * The strand-network bootstrap addresses are resolved on demand over the control
+ * mesh from these peerIds. `hasOtherPeers` reflects membership presence, NOT
+ * dialability, so a cohort whose strand addrs are not yet resolvable still
+ * selects `networked` mode.
+ */
+export function deriveCohortMembers(peers, selfPeerId) {
+    const otherPeerIds = [];
+    const seen = new Set();
+    for (const peer of peers) {
+        if (selfPeerId !== undefined && peer.peerId === selfPeerId) {
+            continue;
+        }
+        if (seen.has(peer.peerId)) {
+            continue;
+        }
+        seen.add(peer.peerId);
+        otherPeerIds.push(peer.peerId);
+    }
+    return { otherPeerIds, hasOtherPeers: otherPeerIds.length > 0 };
+}
+/**
+ * Choose the strand mode. An explicit mode (from `addStrand`) always wins. When
+ * omitted (the `handleStrandAdded` discovery path, or an `addStrand` caller that
+ * leaves it unset), infer: `bootstrap` for a solo/first node (no other peers),
+ * `networked` once the cohort has other members.
+ */
+export function selectStrandMode(explicitMode, hasOtherPeers) {
+    return explicitMode ?? (hasOtherPeers ? 'networked' : 'bootstrap');
+}
+//# sourceMappingURL=strand-cohort.js.map

package/dist/strand-cohort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strand-cohort.js","sourceRoot":"","sources":["../src/strand-cohort.ts"],"names":[],"mappings":"AAqCA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAsB,EAAE,UAAmB;IAC7E,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoC,EAAE,aAAsB;IAC3F,OAAO,YAAY,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;AACrE,CAAC"}

package/dist/strand-database.d.ts

@@ -26,28 +26,76 @@ export interface StrandDatabaseConfig {
      * across the two consumers.
      */
     rawStorage?: IRawStorage;
+    /**
+     * Strand type (`'o'` open / `'c'` closed) from the control-network strand row.
+     * Drives the founder bootstrap: open strands get a `Header` only; closed strands
+     * also get the founding `Member`+`Authority`.
+     */
+    strandType: 'o' | 'c';
+    /**
+     * The closed-strand `MemberPrivateKey` (base64 protobuf) from the strand row.
+     * Required when `founder` is true and `strandType` is `'c'` — it derives the
+     * founding `Member.Key`/`Authority.MemberKey`. Absent for open strands.
+     */
+    memberPrivateKey?: string;
+    /**
+     * Whether this node founds the strand. When true, {@link initialize} runs the
+     * one-time founder membership bootstrap after the schema is applied. Joiners
+     * leave this false and write nothing (rows arrive via sync). Defaults to false.
+     */
+    founder?: boolean;
 }
 /**
- * StrandDatabase manages the sApp schema for a strand using Quereus with Optimystic backend.
- * Each strand instance has its own isolated database with the sApp's schema applied.
+ * StrandDatabase manages the sApp schema for a strand using Quereus with the
+ * Optimystic backend. Each strand instance has its own isolated database with
+ * the sApp's schema applied.
+ *
+ * This class owns the `Database` lifecycle (creation, `getDatabase()`, `close()`)
+ * but delegates the actual SQL-surface composition — plugin registration, node
+ * wiring, catalog hydration, schema apply — to `connectToStrand` from
+ * `@serfab/quereus-plugin-sereus`, the single shared composition. The libp2p
+ * node is injected here, so `connectToStrand` never *creates* the node;
+ * `StrandInstanceManager` owns the node lifecycle. (The strand connection's
+ * `shutdown` still stops the injected node via the collection factory, so the
+ * manager's own `node.stop()` is an idempotent second stop — see `close()`.)
  */
 export declare class StrandDatabase {
     private db;
-    private collectionFactory;
+    private shutdownStrand;
     private readonly config;
     private initialized;
     constructor(config: StrandDatabaseConfig);
     /**
-     * Initialize the database - register plugins and execute sApp schema
+     * Initialize the database — create the `Database` and delegate the strand
+     * SQL-surface composition (plugins, node wiring, hydrate, schema apply) to
+     * `connectToStrand` with the injected libp2p node.
      */
     initialize(): Promise<void>;
-    private executeSchema;
+    /**
+     * Run the founder membership bootstrap against the freshly-composed strand DB.
+     *
+     * Derives the founding keypair from the closed-strand `memberPrivateKey` (the
+     * `Member.Key`/`Authority.MemberKey` are its public key); a closed strand with no
+     * `memberPrivateKey` throws, because it could never seat a founding authority.
+     * Open strands derive no keypair (Header only). Idempotent — see
+     * {@link bootstrapFounderMembership}.
+     */
+    private bootstrapFounder;
+    /**
+     * Derive the founding keypair for a closed strand from its `memberPrivateKey`,
+     * failing loudly when the key is absent (a closed strand with no founding
+     * Authority can never admit anyone).
+     */
+    private deriveFounderKeyPair;
     /**
      * Get the underlying database for queries
      */
     getDatabase(): Database;
     /**
-     * Close the database and cleanup resources
+     * Close the database and cleanup resources. Runs the strand-connection
+     * shutdown (collection-factory teardown, which also stops the injected node),
+     * then closes the `Database`. `StrandInstanceManager.releaseRuntime` issues a
+     * further idempotent `node.stop()` after this returns.
      */
     close(): Promise<void>;
     private ensureInitialized;

package/dist/strand-database.js

@@ -1,122 +1,107 @@
 import debug from 'debug';
-import { Database, registerPlugin } from '@quereus/quereus';
-import cryptoPlugin from '@optimystic/quereus-plugin-crypto/plugin';
-import optimysticPlugin from '@optimystic/quereus-plugin-optimystic/plugin';
+import { Database } from '@quereus/quereus';
+import { connectToStrand } from '@serfab/quereus-plugin-sereus';
+import { bootstrapFounderMembership } from './strand-membership-writer.js';
+import { strandMemberKeyPair } from './strand-member-key.js';
 const log = debug('sereus:cadre:strand-db');
 const timing = debug('sereus:cadre:timing');
 /**
- * StrandDatabase manages the sApp schema for a strand using Quereus with Optimystic backend.
- * Each strand instance has its own isolated database with the sApp's schema applied.
+ * StrandDatabase manages the sApp schema for a strand using Quereus with the
+ * Optimystic backend. Each strand instance has its own isolated database with
+ * the sApp's schema applied.
+ *
+ * This class owns the `Database` lifecycle (creation, `getDatabase()`, `close()`)
+ * but delegates the actual SQL-surface composition — plugin registration, node
+ * wiring, catalog hydration, schema apply — to `connectToStrand` from
+ * `@serfab/quereus-plugin-sereus`, the single shared composition. The libp2p
+ * node is injected here, so `connectToStrand` never *creates* the node;
+ * `StrandInstanceManager` owns the node lifecycle. (The strand connection's
+ * `shutdown` still stops the injected node via the collection factory, so the
+ * manager's own `node.stop()` is an idempotent second stop — see `close()`.)
  */
 export class StrandDatabase {
     constructor(config) {
         this.db = null;
-        this.collectionFactory = null;
+        this.shutdownStrand = null;
         this.initialized = false;
         this.config = config;
     }
     /**
-     * Initialize the database - register plugins and execute sApp schema
+     * Initialize the database — create the `Database` and delegate the strand
+     * SQL-surface composition (plugins, node wiring, hydrate, schema apply) to
+     * `connectToStrand` with the injected libp2p node.
      */
     async initialize() {
         if (this.initialized) {
             log('StrandDatabase for strand %s already initialized', this.config.strandId);
             return;
         }
-        log('Initializing StrandDatabase for strand: %s (sApp: %s v%s)', this.config.strandId, this.config.sAppConfig.id, this.config.sAppConfig.version);
-        // Create database instance
-        this.db = new Database();
         const sid = this.config.strandId;
-        // Register crypto plugin (provides digest, sign, verify functions)
-        let t0 = performance.now();
-        await registerPlugin(this.db, cryptoPlugin);
-        timing('[strandDb:%s] cryptoPlugin: %dms', sid, Math.round(performance.now() - t0));
-        log('Registered crypto plugin');
-        // Register optimystic plugin. In `bootstrap` mode we route through the
-        // local transactor so a solo node can initialize (schema apply etc.)
-        // without network round trips. In `networked` mode the network transactor
-        // is used. Mode is fixed for the lifetime of this Database instance; the
-        // caller must restart the strand to transition modes.
-        t0 = performance.now();
-        const networkName = `strand-${sid}`;
         const mode = this.config.mode ?? 'networked';
-        const defaultTransactor = mode === 'bootstrap' ? 'local' : 'network';
-        // In bootstrap mode the local transactor IS the data path. Hand the plugin
-        // the strand's raw storage (same instance the libp2p node uses) so writes
-        // persist to the host backend instead of in-memory storage.
-        const rawStorage = this.config.rawStorage;
-        const pluginConfig = {
-            default_transactor: defaultTransactor,
-            default_key_network: 'libp2p',
-            default_network_name: networkName,
-            enable_cache: true,
-        };
-        if (mode === 'bootstrap' && rawStorage) {
-            pluginConfig.rawStorageFactory = () => rawStorage;
-        }
-        // The plugin's published signature is `Record<string, SqlValue>` but it
-        // also reads `rawStorageFactory` (a function reference) from the same map.
-        // Cast through unknown rather than widen the public type.
-        const pluginResult = optimysticPlugin(this.db, pluginConfig);
-        log('Optimystic plugin registered for strand %s (mode=%s, transactor=%s, persistentStorage=%s)', sid, mode, defaultTransactor, mode === 'bootstrap' && !!rawStorage);
-        // Register vtables and functions manually since we need access to collectionFactory
-        for (const vtable of pluginResult.vtables) {
-            this.db.registerModule(vtable.name, vtable.module, vtable.auxData);
-        }
-        for (const func of pluginResult.functions) {
-            this.db.registerFunction(func.schema);
-        }
-        timing('[strandDb:%s] optimysticPlugin: %dms', sid, Math.round(performance.now() - t0));
-        this.collectionFactory = pluginResult.collectionFactory;
-        // Inject the libp2p node into the collection factory
-        t0 = performance.now();
-        this.collectionFactory.registerLibp2pNode(networkName, this.config.libp2pNode, this.config.coordinatedRepo);
-        timing('[strandDb:%s] registerLibp2pNode: %dms', sid, Math.round(performance.now() - t0));
-        log('Registered libp2p node with collection factory');
-        // Set optimystic as the default virtual table module so that
-        // `declare schema` tables (which omit USING) are backed by optimystic
-        // instead of the built-in memory module.
-        t0 = performance.now();
-        this.db.setDefaultVtabName('optimystic');
-        this.db.setDefaultVtabArgs({
-            networkName,
-            transactor: defaultTransactor,
-            keyNetwork: 'libp2p',
+        log('Initializing StrandDatabase for strand: %s (sApp: %s v%s, mode=%s)', sid, this.config.sAppConfig.id, this.config.sAppConfig.version, mode);
+        this.db = new Database();
+        // Delegate to the shared composition. The node is injected, so:
+        //  - `connectToStrand` never creates a node (its `createdNode` stays null);
+        //    `StrandInstanceManager` owns the node lifecycle. Its `shutdown` does
+        //    still stop the injected node via the collection factory, so the
+        //    manager's later `node.stop()` is an idempotent second stop;
+        //  - `storage` (the strand's raw storage, same instance the node uses) is
+        //    handed to the plugin's local transactor in bootstrap mode so DML lands
+        //    on the host backend rather than in-memory.
+        const t0 = performance.now();
+        const result = await connectToStrand(this.db, {
+            strandId: sid,
+            schema: this.config.sAppConfig.schema,
+            mode,
+            storage: this.config.rawStorage,
+            libp2pNode: this.config.libp2pNode,
+            coordinatedRepo: this.config.coordinatedRepo,
+            enableCache: true,
         });
-        timing('[strandDb:%s] setDefaultVtab: %dms', sid, Math.round(performance.now() - t0));
-        log('Set default vtab to optimystic (networkName=%s, transactor=%s)', networkName, defaultTransactor);
-        // Hydrate Quereus's catalog from any persisted optimystic vtab schemas
-        // before running `apply schema App;`. Without this, a warm restart diffs
-        // the wrapped DDL against an empty catalog and re-emits CREATE TABLE /
-        // CREATE INDEX for every persisted object — which round-trips through
-        // optimystic storage and is the cause of the ~160s warm-start regression
-        // tracked in strand-database-must-hydrate-catalog-before-apply-schema.
-        // No-op on first launch (empty storage).
-        t0 = performance.now();
-        const hydrated = await pluginResult.hydrate(this.db);
-        timing('[strandDb:%s] hydrate: %dms (tables=%d, indexes=%d)', sid, Math.round(performance.now() - t0), hydrated.tables, hydrated.indexes);
-        log('Hydrated catalog for strand %s (tables=%d, indexes=%d)', sid, hydrated.tables, hydrated.indexes);
-        // Execute the sApp schema DDL
-        t0 = performance.now();
-        await this.executeSchema();
-        timing('[strandDb:%s] executeSchema: %dms', sid, Math.round(performance.now() - t0));
+        this.shutdownStrand = result.shutdown;
+        timing('[strandDb:%s] connectToStrand: %dms (hydrated tables=%d, indexes=%d)', sid, Math.round(performance.now() - t0), result.hydrated?.tables ?? 0, result.hydrated?.indexes ?? 0);
+        // Founder-only: write the one-time membership bootstrap now that the schema is
+        // applied (connectToStrand has returned). A throw here propagates out of
+        // initialize() so buildStrandRuntime's rollback tears the half-built strand
+        // down rather than leaking a node. Joiners skip this — their rows arrive via sync.
+        if (this.config.founder === true) {
+            await this.bootstrapFounder();
+        }
         this.initialized = true;
         log('StrandDatabase for strand %s initialized successfully', sid);
     }
-    async executeSchema() {
-        const rawSchema = this.config.sAppConfig.schema;
-        log('Applying sApp schema for strand %s', this.config.strandId);
-        // Wrap the raw schema DDL in a declarative schema block and apply it.
-        // This ensures proper schema management with diff/apply semantics.
-        // The schema is applied to a named schema 'App' to keep it isolated.
-        const wrappedSchema = `
-      declare schema App {
-        ${rawSchema}
-      }
-      apply schema App;
-    `;
-        await this.db.exec(wrappedSchema);
-        log('sApp schema applied to strand %s', this.config.strandId);
+    /**
+     * Run the founder membership bootstrap against the freshly-composed strand DB.
+     *
+     * Derives the founding keypair from the closed-strand `memberPrivateKey` (the
+     * `Member.Key`/`Authority.MemberKey` are its public key); a closed strand with no
+     * `memberPrivateKey` throws, because it could never seat a founding authority.
+     * Open strands derive no keypair (Header only). Idempotent — see
+     * {@link bootstrapFounderMembership}.
+     */
+    async bootstrapFounder() {
+        const { strandId, strandType, memberPrivateKey, sAppConfig } = this.config;
+        const founderKeyPair = strandType === 'c'
+            ? this.deriveFounderKeyPair(strandId, memberPrivateKey)
+            : undefined;
+        await bootstrapFounderMembership(this.db, {
+            strandId,
+            type: strandType,
+            sApp: sAppConfig,
+            founderKeyPair,
+        });
+    }
+    /**
+     * Derive the founding keypair for a closed strand from its `memberPrivateKey`,
+     * failing loudly when the key is absent (a closed strand with no founding
+     * Authority can never admit anyone).
+     */
+    deriveFounderKeyPair(strandId, memberPrivateKey) {
+        if (!memberPrivateKey) {
+            throw new Error(`Cannot found closed strand ${strandId}: the strand row has no MemberPrivateKey. ` +
+                'A closed strand needs a founding Member/Authority derived from that key.');
+        }
+        return strandMemberKeyPair(memberPrivateKey);
     }
     /**
      * Get the underlying database for queries
@@ -126,15 +111,18 @@ export class StrandDatabase {
         return this.db;
     }
     /**
-     * Close the database and cleanup resources
+     * Close the database and cleanup resources. Runs the strand-connection
+     * shutdown (collection-factory teardown, which also stops the injected node),
+     * then closes the `Database`. `StrandInstanceManager.releaseRuntime` issues a
+     * further idempotent `node.stop()` after this returns.
      */
     async close() {
-        if (this.collectionFactory) {
-            await this.collectionFactory.shutdown();
-            this.collectionFactory = null;
+        if (this.shutdownStrand) {
+            await this.shutdownStrand();
+            this.shutdownStrand = null;
         }
         if (this.db) {
-            this.db.close();
+            void this.db.close();
             this.db = null;
         }
         this.initialized = false;

package/dist/strand-database.js.map

@@ -1 +1 @@
-{"version":3,"file":"strand-database.js","sourceRoot":"","sources":["../src/strand-database.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,YAAY,MAAM,0CAA0C,CAAC;AACpE,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAM5E,MAAM,GAAG,GAAG,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;AA6C5C;;;GAGG;AACH,MAAM,OAAO,cAAc;IAMzB,YAAY,MAA4B;QALhC,OAAE,GAAoB,IAAI,CAAC;QAC3B,sBAAiB,GAA6B,IAAI,CAAC;QAEnD,gBAAW,GAAG,KAAK,CAAC;QAG1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,kDAAkD,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,GAAG,CAAC,2DAA2D,EAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EACzB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAC/B,CAAC;QAEF,2BAA2B;QAC3B,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAEjC,mEAAmE;QACnE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC5C,MAAM,CAAC,kCAAkC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACpF,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAEhC,uEAAuE;QACvE,qEAAqE;QACrE,0EAA0E;QAC1E,yEAAyE;QACzE,sDAAsD;QACtD,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,UAAU,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,GAAe,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;QACzD,MAAM,iBAAiB,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,2EAA2E;QAC3E,0EAA0E;QAC1E,4DAA4D;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1C,MAAM,YAAY,GAA4B;YAC5C,kBAAkB,EAAE,iBAAiB;YACrC,mBAAmB,EAAE,QAAQ;YAC7B,oBAAoB,EAAE,WAAW;YACjC,YAAY,EAAE,IAAI;SACnB,CAAC;QACF,IAAI,IAAI,KAAK,WAAW,IAAI,UAAU,EAAE,CAAC;YACvC,YAAY,CAAC,iBAAiB,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC;QACpD,CAAC;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,0DAA0D;QAC1D,MAAM,YAAY,GAAG,gBAAgB,CACnC,IAAI,CAAC,EAAE,EACP,YAAiE,CACxC,CAAC;QAC5B,GAAG,CAAC,2FAA2F,EAC7F,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC;QAEtE,oFAAoF;QACpF,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,OAAqE,EAAE,CAAC;YACxG,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAa,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,SAAuC,EAAE,CAAC;YACxE,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAa,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,CAAC,sCAAsC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAExF,IAAI,CAAC,iBAAiB,GAAG,YAAY,CAAC,iBAAiB,CAAC;QAExD,qDAAqD;QACrD,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CACvC,WAAW,EACX,IAAI,CAAC,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,MAAM,CAAC,eAAe,CAC5B,CAAC;QACF,MAAM,CAAC,wCAAwC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1F,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAEtD,6DAA6D;QAC7D,sEAAsE;QACtE,yCAAyC;QACzC,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC;YACzB,WAAW;YACX,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,oCAAoC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACtF,GAAG,CAAC,gEAAgE,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAEtG,uEAAuE;QACvE,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,yEAAyE;QACzE,uEAAuE;QACvE,yCAAyC;QACzC,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,qDAAqD,EAC1D,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9E,GAAG,CAAC,wDAAwD,EAC1D,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE1C,8BAA8B;QAC9B,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,CAAC,mCAAmC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAErF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,GAAG,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAChD,GAAG,CAAC,oCAAoC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEhE,sEAAsE;QACtE,mEAAmE;QACnE,qEAAqE;QACrE,MAAM,aAAa,GAAG;;UAEhB,SAAS;;;KAGd,CAAC;QAEF,MAAM,IAAI,CAAC,EAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnC,GAAG,CAAC,kCAAkC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,WAAW;QACT,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,EAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;QACD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,GAAG,CAAC,qCAAqC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,MAAM,CAAC,QAAQ,4CAA4C,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"strand-database.js","sourceRoot":"","sources":["../src/strand-database.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAMhE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,GAAG,GAAG,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;AA6C5C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,cAAc;IAMzB,YAAY,MAA4B;QALhC,OAAE,GAAoB,IAAI,CAAC;QAC3B,mBAAc,GAA0C,IAAI,CAAC;QAE7D,gBAAW,GAAG,KAAK,CAAC;QAG1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,kDAAkD,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,IAAI,GAAe,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;QACzD,GAAG,CAAC,oEAAoE,EACtE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAExE,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QAEzB,gEAAgE;QAChE,4EAA4E;QAC5E,0EAA0E;QAC1E,qEAAqE;QACrE,iEAAiE;QACjE,0EAA0E;QAC1E,4EAA4E;QAC5E,gDAAgD;QAChD,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE;YAC5C,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM;YACrC,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAC/B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;QACtC,MAAM,CAAC,sEAAsE,EAC3E,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EACvC,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;QAE/D,+EAA+E;QAC/E,yEAAyE;QACzE,4EAA4E;QAC5E,mFAAmF;QACnF,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,GAAG,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,gBAAgB;QAC5B,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3E,MAAM,cAAc,GAAG,UAAU,KAAK,GAAG;YACvC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YACvD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,0BAA0B,CAAC,IAAI,CAAC,EAAG,EAAE;YACzC,QAAQ;YACR,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,UAAU;YAChB,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,oBAAoB,CAAC,QAAgB,EAAE,gBAAoC;QACjF,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,4CAA4C;gBAClF,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,OAAO,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,WAAW;QACT,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,EAAG,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,GAAG,CAAC,qCAAqC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,MAAM,CAAC,QAAQ,4CAA4C,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;CACF"}

package/dist/strand-formation-manager.d.ts

@@ -1,6 +1,6 @@
 import type { Libp2p } from '@libp2p/interface';
 import type { OpenInvitation, FormStrandResult, StrandFormationDisclosure } from './types.js';
-import type { DisclosureValidator, FormationUsageRecorder, StrandProvisioner } from './strand-solicitation.js';
+import type { DisclosureValidator, FormationUsageRecorder, StrandProvisioner, FormationResponseValidator } from './strand-solicitation.js';
 /**
  * Configuration for StrandFormationManager
  */
@@ -20,12 +20,14 @@ export interface StrandFormationManagerConfig {
  * Options for creating a StrandFormationManager
  */
 export interface StrandFormationManagerOptions {
-    /** Validates disclosures from initiators */
+    /** Validates disclosures from initiators (responder side) */
     disclosureValidator?: DisclosureValidator;
-    /** Records and validates token usage */
+    /** Records and validates token usage (responder side) */
     formationUsageRecorder?: FormationUsageRecorder;
-    /** Provisions strands after validation */
+    /** Provisions strands after validation (responder side) */
     strandProvisioner?: StrandProvisioner;
+    /** Validates the responder's result (initiator side); defaults to a structural check */
+    formationResponseValidator?: FormationResponseValidator;
     /** This party's ID for identification */
     partyId: string;
     /** This party's cadre peer addresses */
@@ -34,22 +36,29 @@ export interface StrandFormationManagerOptions {
     config?: StrandFormationManagerConfig;
 }
 /**
- * StrandFormationManager bridges cadre-core's strand solicitation interfaces
- * with strand-proto's SessionManager for actual protocol handling over libp2p.
+ * StrandFormationManager drives the native cadre-core formation transport
+ * (`strand-formation-protocol.ts`) from cadre-core's strand-solicitation interfaces.
  *
- * It implements SessionHooks by delegating to the existing interfaces:
- * - DisclosureValidator -> validateIdentity
- * - FormationUsageRecorder -> validateToken
- * - StrandProvisioner -> provisionStrand
+ * Responder side: a {@link FormationListener} wires the inbound protocol to
+ * {@link FormationUsageRecorder} (token), {@link DisclosureValidator} (identity),
+ * and {@link StrandProvisioner} (provisioning), disclosing this party's real
+ * identity + cadre only after validation.
+ *
+ * Initiator side: {@link formStrand} dials the responder carrying the real
+ * disclosure/token/cadre, then validates the responder's result via the
+ * {@link FormationResponseValidator} (or a built-in structural check).
  */
 export declare class StrandFormationManager {
-    private readonly sessionManager;
     private readonly disclosureValidator?;
     private readonly formationUsageRecorder?;
     private readonly strandProvisioner?;
+    private readonly formationResponseValidator?;
     private readonly partyId;
     private readonly cadrePeerAddrs;
-    private registeredNodes;
+    private readonly config;
+    private readonly listener;
+    private readonly registeredNodes;
+    private dialerSessions;
     constructor(options: StrandFormationManagerOptions);
     /**
      * Register this manager as a protocol handler on a libp2p node.
@@ -61,12 +70,11 @@ export declare class StrandFormationManager {
      */
     unregisterResponder(node: Libp2p, protocolId?: string): void;
     /**
-     * Form a strand with a responder via an open invitation.
+     * Form a strand with a responder via an open invitation (initiator side).
      *
-     * This is the initiator-side operation. It:
-     * 1. Converts the OpenInvitation to a BootstrapLink
-     * 2. Calls SessionManager.initiateBootstrap()
-     * 3. Returns the result as a FormStrandResult
+     * Builds a contact message carrying the real token + disclosure + this party's
+     * real cadre addresses, dials the responder over the native protocol, and
+     * validates the responder's result before returning.
      */
     formStrand(invitation: OpenInvitation, disclosure: StrandFormationDisclosure, node: Libp2p): Promise<FormStrandResult>;
     /**
@@ -76,10 +84,62 @@ export declare class StrandFormationManager {
         listeners: number;
         dialers: number;
     };
+    private validateToken;
+    private validateDisclosure;
+    /**
+     * Responder-side provisioning. Routes on how the invite resolves
+     * ({@link ResolvedHostStrand}), and can REJECT post-validation by returning a
+     * {@link ResponderProvisionOutcome} with `approved: false` — `runSession` turns that
+     * into a clean, non-disclosing reply instead of a dropped result frame.
+     *
+     * - **bound** (host strand present): provision-then-record — write the single
+     *   `FormationUsage` consent row against the pre-existing strand (record-only) and
+     *   return it + its membership key (a read-gating secret disclosed only here, behind the
+     *   token + disclosure validation `runSession` already enforced).
+     * - **missing** (invite names a host strand absent on this responder, e.g. unconverged):
+     *   reject cleanly + retryably, writing NO usage row — recording usage here would fail the
+     *   deferred `StrandExists` CHECK at commit and drop the frame.
+     * - **unbound** (no binding): the responder-provisions fallback — see {@link provisionUnbound}.
+     *
+     * Defense-in-depth: known provisioning/redeem failures (notably the concurrent
+     * `(Token, UseNumber)` PK collision when two redemptions of one unbound single-use invite
+     * race) are caught and mapped to a logged, retry-suggesting rejection rather than a thrown
+     * insert + a silently-closed stream. The LOG-before-reject keeps this a deliberate
+     * internal-error→protocol-rejection conversion (AGENTS.md: don't eat exceptions silently),
+     * not control-flow-by-exception.
+     */
+    private provisionAsResponder;
+    /**
+     * Responder-provisions fallback (invite binds no host strand). Precedence:
+     *
+     * 1. `recorder.provisionAndRecord` present (a real DB recorder) → atomic create-strand +
+     *    record-consent, so the unbound redemption is single-use just like the bound path.
+     *    Returns the new strand (+ key, null for an open responder-provisioned strand).
+     * 2. else `strandProvisioner` present → the legacy/mock contract: provision a bare strand,
+     *    NO inline usage write (those callers record usage explicitly via
+     *    `recordFormationComplete`, or assert transport invariants only). Threads the invite's
+     *    REAL `sAppId`.
+     * 3. else → a structural placeholder (no recorder + no provisioner ⇒ no single-use semantics
+     *    exist to enforce).
+     *
+     * Plan tradeoff — option (a) "record usage on the fallback" over (b) "remove the fallback":
+     * (a) closes the single-use hole with a targeted atomic create+record and leaves the
+     * `StrandProvisioner` mock-transport tests untouched; (b) would delete the provisioner
+     * surface and churn ~6 unit + ~6 integration sites for ZERO production benefit (production
+     * — `cadre-web.ts` / `cadre-phone.ts` — always publishes strand-BOUND invites and treats
+     * the responder-provisions placeholder as failure). The broader "should this fallback exist
+     * at all?" question lives in backlog `formation-initiatorcreates-cover-or-remove`.
+     */
+    private provisionUnbound;
+    /** Wrap a provision result as an approving {@link ResponderProvisionOutcome}. */
+    private approve;
     /**
-     * Create SessionHooks that delegate to our interfaces
+     * The invite's authoritative `sAppId` for the responder-provisions fallback, read back
+     * from the recorder's `isTokenValid` invitation (the real `FormationInvite.sAppId`).
+     * Empty string when no recorder is wired or the invitation omits it.
      */
-    private createSessionHooks;
+    private resolveInviteSAppId;
+    private validateResponse;
 }
 /**
  * Create a StrandFormationManager with the given options